V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
28.10.2026, 08:20V platformi MLflow je bila odkrita kritična ranljivost CVE-2026-116692, ki napadalcu omogoča oddaljeno izvajanje kode prek deserializacije scorerjev tretjih strani. Ranljivost je ocenjena z najvišjo oceno CVSS 9.8 in je odpravljena v različici 3.17.0.
Apple je varnostne popravke za ranljivost CoreGraphics, izdane za novejše naprave, prenesel tudi na starejše modele iPhone in iPad. Ranljivost CVE-2026-86950 je v katalogu CISA KEV, kar pomeni potrjeno aktivno izkoriščanje.
Varnostni raziskovalci so onesposobili zapuščen posodobitveni mehanizem v aplikaciji Time4Popcorn, ki je po njihovih ocenah ogrožal milijone računalnikov. Ranljivost CVE-2026-30612 je ocenjena kot kritična, saj je omogočala oddaljeno izvajanje kode.
Phishing Pages on Webflow: A Growing Threat Cybersecurity researchers are sounding alarms about a rise in phishing pages created using a website builder tool called Webflow....
New Attack Technique Bypasses Microsoft's Driver Signature Enforcement A new attack technique has emerged that can bypass Microsoft's Driver Signature Enforcement (DSE) on fully patched Windows...
REvil Ransomware Members Sentenced to Prison in Russia Four members of the now-defunct REvil ransomware operation have recently been sentenced to several years in prison in...
Introduction to TeamTNT's New Campaign TeamTNT, the infamous cryptojacking group, is gearing up for a new large-scale campaign. Their target? Cloud-native environments that are vulnerable to...
Kaj je cloud computing in njegov pomen za varnost podatkov? Cloud computing je danes temelj mnogih modernih tehnoloških infrastrukture. Kljub temu, da se tehnologija hitro razvija,...
New Malicious Email Campaign Targeting Ukrainian Entities The Computer Emergency Response Team of Ukraine (CERT-UA) has recently reported a new malicious email campaign. This campaign primarily...
Security Flaw in Wi-Fi Test Suite: CVE-2024-41992 Explained A critical security flaw affecting the Wi-Fi Test Suite has been identified. This vulnerability, tracked as CVE-2024-41992, allows...
Apple’s Private Cloud Compute: A New Era for Virtual Research Environments Apple has recently made waves in the tech world by unveiling its Private Cloud Compute...
Understanding AI Threats and Identity Security Solutions Artificial Intelligence (AI) has rapidly evolved from a futuristic concept to a potent weapon in the hands of bad...
SEC Charges Companies Over Misleading Disclosures Related to SolarWinds Hack In recent news, the U.S. Securities and Exchange Commission (SEC) charged four companies for making "materially...
Uvod v Cyber Varnost in SSL Certifikate Cyber varnost je ključen dejavnik pri zaščiti vaših podatkov in spletne strani. Ena izmed osnovnih komponent cyber varnosti so...
The Irish data protection authority has fined LinkedIn €310 million ($335 million) for violating user privacy by conducting behavioral analyses of personal data for targeted advertising....
